Re: [squid-users] Another ACL Question

From: Simon White <simon@dont-contact.us>
Date: Fri, 5 Apr 2002 14:11:20 +0000

05-Apr-02 at 15:24, Marc-Christian Petersen (m.c.p@gmx.net) wrote :
> > protocol FTP

This should be proto FTP

> hmm, can you give me an example?

You need something like:

acl putters method PUT
acl getters method GET
acl ftpers proto FTP
acl thosewhocanftp src 192.168.0.0/255.255.255.0
acl hewhocanput src 192.168.0.2/255.255.255.255
acl shewhocanget src 192.168.0.3/255.255.255.255

http_access allow ftpers thosewhocanftp !hewhocanput !shewhocanget
http_access allow ftpers hewhocanput putters
http_access allow ftpers shewhocanget getters
http_access deny ftpers any

Something like that should acheive what you are looking for.

Simon.

-- 
|-Simon White, Internet Services Manager, Certified Check Point CCSA.
|-MTDS  Internet, Security, Anti-Virus, Linux and Hosting Solutions.
|-MTDS  14, rue du 16 novembre, Agdal, Rabat, Morocco.
|-MTDS  tel +212.3.767.4861 - fax +212.3.767.4863
Received on Fri Apr 05 2002 - 07:11:23 MST

This archive was generated by hypermail pre-2.1.9 : Tue Dec 09 2003 - 17:07:22 MST